Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft
File:                     voR-uyRJqE-_ayVcYEAo0UIgLJU.mft (raw, json)
Hash identifier:          3PwVEPjxjWzrfDkG2iuHZhg9NCXO/+zKFyyRnzg2a3g=
Subject key identifier:   A5:DD:64:55:7B:36:F7:1E:31:56:8E:73:D6:A1:D2:53:4A:84:0F:B8
Authority key identifier: BE:84:7E:BB:24:49:A8:4F:BF:6B:25:5C:60:40:28:D1:42:20:2C:95
Certificate issuer:       /CN=be847ebb2449a84fbf6b255c604028d142202c95
Certificate serial:       01962DF3C6D53F65BEEDAE12885D6032FFE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/voR-uyRJqE-_ayVcYEAo0UIgLJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft
Manifest number:          14E4
Signing time:             Sun 13 Apr 2025 07:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:12 +0000
Files and hashes:         1: voR-uyRJqE-_ayVcYEAo0UIgLJU.crl (hash: ozkgajrRuJHFI8zJiqZXwUd4HJDTpfQhUDu2EZLKo+s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c6:d5:3f:65:be:ed:ae:12:88:5d:60:32:ff:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be847ebb2449a84fbf6b255c604028d142202c95
        Validity
            Not Before: Apr 13 07:01:12 2025 GMT
            Not After : Apr 14 07:01:12 2025 GMT
        Subject: CN=a5dd64557b36f71e31568e73d6a1d2534a840fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d5:cb:96:83:da:64:af:a3:17:85:8e:4b:c7:
                    7e:d1:8d:bb:66:13:8a:0b:05:85:cc:80:db:62:a6:
                    d1:df:a9:69:29:de:36:54:ba:8b:52:66:98:94:07:
                    ad:1d:fa:e7:a9:1d:74:10:e0:12:8c:48:d0:00:7a:
                    04:f7:d1:79:ac:b6:23:94:11:db:7a:1b:ef:1b:d9:
                    4d:0a:41:31:ed:3d:00:64:dc:72:4e:84:6b:84:ed:
                    d2:57:d0:8c:13:61:76:93:1e:10:9a:17:fd:66:5d:
                    7a:2e:00:42:0d:e5:bb:d1:30:99:b9:9b:02:97:7d:
                    87:6d:d6:96:8c:c6:95:d7:8f:b2:14:9f:ff:6e:38:
                    63:38:83:3b:6e:19:28:2d:36:01:39:22:ce:3a:37:
                    dd:37:75:ee:90:57:65:a8:c2:3e:93:a9:e2:e8:73:
                    78:0c:22:d7:76:31:84:f5:12:3b:12:a6:c1:b8:5b:
                    f2:5e:8f:75:d9:dd:08:07:fe:fe:7a:df:71:2d:b9:
                    a8:e5:a5:9b:63:ef:53:6e:39:11:0d:4f:70:dc:bc:
                    ee:20:ea:5b:59:3b:95:4f:0d:e1:95:16:77:d1:ce:
                    05:5e:6b:d8:ec:d2:15:62:87:88:f5:ab:8f:34:d7:
                    63:36:f6:5e:64:43:de:4c:df:5e:df:6e:3c:e6:a0:
                    4c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DD:64:55:7B:36:F7:1E:31:56:8E:73:D6:A1:D2:53:4A:84:0F:B8
            X509v3 Authority Key Identifier:
                keyid:BE:84:7E:BB:24:49:A8:4F:BF:6B:25:5C:60:40:28:D1:42:20:2C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/voR-uyRJqE-_ayVcYEAo0UIgLJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:67:92:4f:6a:cd:98:d0:f9:a9:f2:2b:5a:4e:01:6b:09:2b:
         a4:ae:30:be:cc:aa:05:48:3c:14:6b:02:20:9f:d2:b8:30:5d:
         8b:99:b1:22:07:90:3a:c5:a7:41:b7:5b:4a:81:dc:4c:6d:bf:
         c9:ec:15:ba:da:79:8b:7b:ad:fb:91:67:69:de:77:f5:b2:e1:
         12:83:89:75:3a:38:7a:8e:b0:76:49:58:73:2e:1e:79:31:eb:
         b9:f1:9a:b0:e0:b4:b0:36:50:a5:a9:53:32:f8:99:a4:e1:c5:
         94:6e:45:8f:13:d4:7c:cd:b4:ae:f6:f1:0c:61:3f:46:d6:f2:
         e9:9f:d4:f4:71:36:5f:74:dc:c3:a3:3d:76:35:94:67:9a:3d:
         75:4c:af:b8:1d:af:fb:0f:3e:db:dd:06:7b:e3:2e:d6:f6:f0:
         97:8a:aa:95:5d:a4:3d:85:aa:63:8e:c0:30:b8:42:c4:c8:16:
         d5:14:fa:0d:bf:ba:3f:f4:c0:89:bc:da:c3:bd:72:0e:f0:d9:
         1d:9d:0c:09:10:ac:9c:6d:c3:a2:bf:ac:fa:43:81:2c:ba:16:
         2a:93:9f:02:ad:30:1e:89:0e:3d:a0:32:0e:f6:68:14:c4:77:
         d5:40:ff:fa:6c:30:26:77:15:9a:66:2b:e6:ac:9b:cc:73:07:
         fb:73:33:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----